Skip to main content

access_point_policies

Creates, updates, deletes or gets an access_point_policy resource or lists access_point_policies in a region

Overview

Nameaccess_point_policies
TypeResource
DescriptionAWS::S3ObjectLambda::AccessPointPolicy resource is an Amazon S3ObjectLambda policy type that you can use to control permissions for your S3ObjectLambda
Idaws.s3objectlambda.access_point_policies

Fields

NameDatatypeDescription
object_lambda_access_pointstringThe name of the Amazon S3 ObjectLambdaAccessPoint to which the policy applies.
policy_documentobjectA policy document containing permissions to add to the specified ObjectLambdaAccessPoint. For more information, see Access Policy Language Overview (https://docs.aws.amazon.com/AmazonS3/latest/dev/access-policy-language-overview.html) in the Amazon Simple Storage Service Developer Guide.
regionstringAWS region.

Methods

NameAccessible byRequired Params
create_resourceINSERTObjectLambdaAccessPoint, PolicyDocument, region
delete_resourceDELETEdata__Identifier, region
update_resourceUPDATEdata__Identifier, data__PatchDocument, region
get_resourceSELECTdata__Identifier, region

SELECT examples

Gets all properties from an individual access_point_policy.

SELECT
region,
object_lambda_access_point,
policy_document
FROM aws.s3objectlambda.access_point_policies
WHERE region = 'us-east-1' AND data__Identifier = '<ObjectLambdaAccessPoint>';

INSERT example

Use the following StackQL query and manifest file to create a new access_point_policy resource, using stack-deploy.

/*+ create */
INSERT INTO aws.s3objectlambda.access_point_policies (
ObjectLambdaAccessPoint,
PolicyDocument,
region
)
SELECT
'{{ ObjectLambdaAccessPoint }}',
'{{ PolicyDocument }}',
'{{ region }}';

DELETE example

/*+ delete */
DELETE FROM aws.s3objectlambda.access_point_policies
WHERE data__Identifier = '<ObjectLambdaAccessPoint>'
AND region = 'us-east-1';

Permissions

To operate on the access_point_policies resource, the following permissions are required:

Create

s3:PutAccessPointPolicyForObjectLambda,
s3:GetAccessPointPolicyForObjectLambda

Read

s3:GetAccessPointPolicyForObjectLambda

Update

s3:PutAccessPointPolicyForObjectLambda,
s3:GetAccessPointPolicyForObjectLambda

Delete

s3:DeleteAccessPointPolicyForObjectLambda,
s3:GetAccessPointPolicyForObjectLambda